Threat actor: Any
Defined in model.py:85
Threats
| Threat | Status | Impact | Likelihood | Risk | After mitigations |
|---|---|---|---|---|---|
| Configuration vulnerability in Source interface THREAT5 | partially mitigated | High | Medium | 9 high | 9 high |
| Vulnerabilities maliciously introduced in python libraries THREAT86 | partially mitigated | High | Medium | 9 high | 9 high |
| Landing page host is compromised THREAT58 | inform | High | High | 12 high | 6 medium |
| Known exploitable vulnerabilities in Python or libraries used by SecureDrop THREAT34 | mitigated | High | Medium | 9 high | 6 medium |
| Malicious input vulnerability in Journalist interface THREAT8 | mitigated | High | Low | 6 medium | 6 medium |
| Configuration vulnerability in Journalist interface THREAT9 | mitigated | Medium | Medium | 6 medium | 6 medium |
| Known vulnerabilities in Tor (incl. Onion Service cryptography, authentication) THREAT35 | mitigated | High | Low | 6 medium | 6 medium |
| Source codename compromised THREAT74 | partially mitigated | High | Low | 6 medium | 6 medium |
| Journalist workstation Tails Persistent Volume passphrase compromised THREAT121 Legacy (Tails/SVS) | inform | Medium | Medium | 6 medium | 6 medium |
| Landing page TLS private key compromised THREAT122 | partially mitigated | High | Low | 6 medium | 6 medium |
| Plaintext submissions exfiltrated THREATQW40 | partially mitigated | High | Low | 6 medium | 6 medium |
| Vulnerability introduced to AppVMs via Template dependency THREATQW58 | partially mitigated | High | Low | 6 medium | 6 medium |
| Source submits large / invalid messages THREAT166 | mitigated | High | High | 12 high | 4 medium |
| File and resource vulnerability in Source interface THREAT25 | mitigated | High | Medium | 9 high | 4 medium |
| Firewall not up to date THREAT47 | inform | Medium | High | 8 high | 4 medium |
| User web traffic to SecureDrop landing page is logged THREAT60 | inform | Medium | High | 8 high | 4 medium |
| User web traffic to SecureDrop landing page is uses CDN and may be logged THREAT61 | inform | Medium | High | 8 high | 4 medium |
| Business logic vulnerability in Source interface THREAT24 | mitigated | High | Low | 6 medium | 4 medium |
| Authentication vulnerability in Source interface THREAT10 | mitigated | Medium | Low | 4 medium | 4 medium |
| Access control vulnerability in Source interface THREAT11 | mitigated | Medium | Low | 4 medium | 4 medium |
| Data protection vulnerability in Source interface THREAT12 | mitigated | Medium | Low | 4 medium | 4 medium |
| Access control vulnerability in Journalist interface THREAT14 | mitigated | Medium | Low | 4 medium | 4 medium |
| Data protection vulnerability in Journalist interface THREAT15 | mitigated | Medium | Low | 4 medium | 4 medium |
| Communications vulnerability in Source interface THREAT16 | mitigated | Medium | Low | 4 medium | 4 medium |
| Communications vulnerability in Journalist interface THREAT17 | mitigated | Medium | Low | 4 medium | 4 medium |
| File and resource vulnerability in Journalist interface THREAT18 | partially mitigated | Medium | Low | 4 medium | 4 medium |
| Session management vulnerability in Source interface THREAT19 | mitigated | Medium | Low | 4 medium | 4 medium |
| Malicious input vulnerability in Source interface THREAT20 | mitigated | Medium | Low | 4 medium | 4 medium |
| Failure to encrypt submissions as they are written to disk THREAT21 | mitigated | Medium | Low | 4 medium | 4 medium |
| Error handling and logging vulnerability in Source interface THREAT22 | mitigated | Medium | Low | 4 medium | 4 medium |
| HTTP security configuration vulnerability in Source interface THREAT23 | mitigated | Medium | Low | 4 medium | 4 medium |
| Error handling and logging vulnerability in Journalist interface THREAT26 | mitigated | Medium | Low | 4 medium | 4 medium |
| HTTP security configuration vulnerability in Journalist interface THREAT27 | mitigated | Medium | Low | 4 medium | 4 medium |
| Transfer device seized/stolen/lost THREAT81 Legacy (Tails/SVS) | inform | Medium | Low | 4 medium | 4 medium |
| Backups THREAT141 | inform | Medium | Low | 4 medium | 4 medium |
| Business Logic vulnerability in Journalist interface THREAT146 | partially mitigated | Medium | Low | 4 medium | 4 medium |
| Firewall logs are not monitored THREAT149 | inform | Medium | Low | 4 medium | 4 medium |
| Known vulnerabilities in the Linux kernel or packages used by app/mon servers THREAT41 | mitigated | High | Low | 6 medium | 3 low |
| Journalist gets phished THREAT56 | inform | Medium | Medium | 6 medium | 3 low |
| Vulnerabilities maliciously introduced in APT packages THREAT159 | accepted | High | Low | 6 medium | 3 low |
| Monitor server is down THREAT158 | inform | Low | Medium | 3 low | 3 low |
| qrexec vulnerability THREATQW51 | accepted | High | Very Low | 3 low | 3 low |
| open-in-dvm vulnerability THREATQW52 | accepted | High | Very Low | 3 low | 3 low |
| Transfer device passphrase compromised THREAT162 Legacy (Tails/SVS) | inform | High | Low | 6 medium | 2 low |
| Web services vulnerability in Source interface THREAT30 | mitigated | Medium | Low | 4 medium | 2 low |
| Web services vulnerability in Journalist interface THREAT82 | mitigated | Medium | Low | 4 medium | 2 low |
| Lingering files in VMs (sd-proxy, sd-devices) are not deleted after use THREATQW67 | partially mitigated | Medium | Low | 4 medium | 2 low |
| Compromised VM spoofs log origin THREATQW56 | accepted | Low | Low | 2 low | 2 low |
| Landing page is framed THREAT63 | inform | Low | Low | 2 low | 1 low |
| Transfer device tampered THREAT46 Legacy (Tails/SVS) | inform | Low | Very Low | 1 low | 1 low |